Sorry for my english.
I think kerberos can be basement security for LAN and Kerberos+LDAP is more simply for users. But no interface to controll this things(exept Windows Servers grafical interfaces). Kerberos is system independed storage(for clients).
In support of Kerberos may need quite a lot of time. There are many interesting things that we want to implement in CDS. For example to add support for asterisk, radius.